Galaxy S26 Hacked Three More Times on Day Two of Pwn2Own Ireland
Summary
Researchers earned $232,500 for exploiting 45 unique zero-days on day two of Pwn2Own Ireland 2026, including three successful hacks of the Samsung Galaxy S26.
Key points
- Researchers demonstrated 45 unique zero-day vulnerabilities on day two, earning $232,500 in awards.
- The Samsung Galaxy S26 was successfully hacked three times by separate teams.
- Researchers also exploited the Sonos Era 300, Home Assistant Green, Dynamo, and Oracle Autonomous AI Database.
- Pwn2Own requires contestants to compromise fully patched devices and demonstrate arbitrary code execution.
- Vendors have 90 days to patch flaws disclosed through the competition before ZDI publicly discloses them.
Article Details
- Event Type
- Zero-day exploitation competition
- Impact
- Researchers demonstrated 45 unique zero-day vulnerabilities and earned $232,500 on the competition's second day. A flagship smartphone was compromised three times, and successful demonstrations also affected smart home devices, AI infrastructure, and a database. Competition targets run the latest firmware, and successful attempts must demonstrate arbitrary code execution. Vendors receive 90 days to patch disclosed vulnerabilities before public disclosure.
People
_McCaulayResearcher identified by this handle who hacked Home Assistant Green on day two.Dimitrios ValsamarasMember of a team that hacked Samsung Galaxy S26 on day two.HaeJung YangOut of Bounds team researcher awarded $40,000 for hacking Dynamo in the AI Infrastructure category.Huỳnh Đức TinVinSOC researcher who, with Vũ Chí Thành, topped the day-one leaderboard and received awards for exploit chains against Oracle Autonomous AI Database and Philips Hue Bridge Pro.Jack DatesRET2 Systems researcher who demonstrated a Sonos Era 300 exploit chain in under a minute.Ken GannonMember of a team that hacked Samsung Galaxy S26 on day two.Kyeongmin KimKAIST Hacking Lab researcher who hacked Samsung Galaxy S26 and Home Assistant Green on day two; withdrew a USB-based attempt against Google Pixel 10.Maxence SchmittDoyensec researcher who hacked Home Assistant Green on day two.Nguyen Thanh DatViettel Cyber Security researcher who hacked Samsung Galaxy S26 on day one; the article notes that some bugs used in day-one attempts were already known to the vendor.Tenia ValsamaraCENSUS Labs researcher on a team that hacked Samsung Galaxy S26 on day two.Vũ Chí ThànhVinSOC researcher who, with Huỳnh Đức Tin, topped the day-one leaderboard and received awards for exploit chains against Oracle Autonomous AI Database and Philips Hue Bridge Pro.Yassine BenganaDoyensec researcher who hacked Home Assistant Green on day two.Yves BieriXint researcher who hacked Home Assistant Green on day two.
Vendors
AppleWhile Apple's iPhone 17 was also a potential target with a maximum award of $300,000 for a remote hack, no contestant registered for an attempt.GoogleBefore day two began, Kyeongmin Kim withdrew his attempt at a USB-based attack targeting the Google Pixel 10.Oracleand Maxence Schmitt also hacked the Home Assistant Green smart home hub, while Ikotas Labs breached the Oracle Autonomous AI Database using a seven-chain zero-day exploit.Philipsthe Oracle Autonomous AI Database, plus an additional $40,000 for chaining seven zero-days to exploit a Philips Hue Bridge Pro smart lighting hub.SamsungSamsung Galaxy S26 hacked three more times at Pwn2Own IrelandSonosJack Dates of RET2 Systems demoed a Sonos Era 300 exploit chain in under a minute, and Out of Bounds team's HaeJung Yang was awarded $40,000 for hacking Dynamo in the AI Infrastructure category.
Products
DynamoJack Dates of RET2 Systems demoed a Sonos Era 300 exploit chain in under a minute, and Out of Bounds team's HaeJung Yang was awarded $40,000 for hacking Dynamo in the AI Infrastructure category.Google Pixel 10Before day two began, Kyeongmin Kim withdrew his attempt at a USB-based attack targeting the Google Pixel 10.Home Assistant GreenXint, Kyeongmin Kim, _McCaulay, and Doyensec's Yassine Bengana and Maxence Schmitt also hacked the Home Assistant Green smart home hub, while Ikotas Labs breached the Oracle Autonomous AI Database using a seven-chainiPhone 17While Apple's iPhone 17 was also a potential target with a maximum award of $300,000 for a remote hack, no contestant registered for an attempt.Oracle Autonomous AI DatabaseSchmitt also hacked the Home Assistant Green smart home hub, while Ikotas Labs breached the Oracle Autonomous AI Database using a seven-chain zero-day exploit.Philips Hue Bridge ProAutonomous AI Database, plus an additional $40,000 for chaining seven zero-days to exploit a Philips Hue Bridge Pro smart lighting hub.QNAP TS-453ESummoning Team won the contest and collected $187,500 after hacking the Samsung Galaxy S25, the Home Assistant Green, the QNAP TS-453E NAS, and multiple Synology devices.Samsung Galaxy S25Summoning Team won the contest and collected $187,500 after hacking the Samsung Galaxy S25, the Home Assistant Green, the QNAP TS-453E NAS, and multiple Synology devices.Samsung Galaxy S26Samsung Galaxy S26 hacked three more times at Pwn2Own IrelandSonos Era 300Jack Dates of RET2 Systems demoed a Sonos Era 300 exploit chain in under a minute, and Out of Bounds team's HaeJung Yang was awarded $40,000 for hacking Dynamo in the AI Infrastructure category.